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Abstract 

On  14  July  2000  and  9  November  2000  two  large  solar  flares  occurred.  As  measured  by  the 
GOES-8  and  GOES-10  satellites,  these  flares  were  accompanied  by  an  increase  in  the  flux  of 
energetic  particles  at  geosynchronous  altitudes.  Here,  we  discuss  the  effect  of  these  flares  on 
communication  satellite  timekeeping,  specifically  timekeeping  onboard  the  Milstar  FLT-1  and 
FLT-2  satellites.  FLT-Vs  timekeeping  device  is  a  crystal  oscillator  clock,  whose  time-reading 
and  oscillator  frequency  are  tied  through  a  satellite  crosslink  to  the  atomic  clock  carried 
onboard  Milstar  FLT-2.  It  is  well  known  that  crystal  oscillator  clocks  have  sensitivity  to 
radiation,  while  atomic  clocks,  like  the  one  onboard  FLT-2,  are  relatively  insensitive  to  space 
radiation.  The  solar  flares  had  a  noticeable  impact  on  the  FLT-1  quartz  crystal  oscillator, 
causing  the  oscillator  frequency  to  change  by  ~  2xlO'10.  However,  the  flares  had  little  if  any 
observable  effect  on  the  FLT-2  Rb  atomic  clock.  Since  the  crystal  oscillator’s  frequency  was 
“slaved”  via  crosslinks  to  FLT-2,  the  slaving  procedure  compensated  for  the  radiation  induced 
changes  in  the  quartz  crystal  oscillator.  Consequently,  crosslink  slaving  of  FLT-1  to  FLT-2 
mitigated  the  influence  of  the  flares  on  FLT-Vs  actual  timekeeping,  and  hence  the  satellite 
communications  system. 


INTRODUCTION 

An  important  element  of  satellite  communications,  in  particular  communications  that  employ  spread- 
spectrum  techniques,  is  the  degree  of  synchronization  and  syntonization  among  spacecraft  clocks.  Though 
the  levels  of  synchronization  and  syntonization  demanded  by  any  system  will  depend  on  a  number  of 
specific  system  details,  it  is  probably  fair  to  say  that  modem  satellite  communications  are  adequately 
served  by  microsecond  synchronization  levels,  and  10'9  levels  of  fractional  frequency  syntonization.  Under 
benign  operating  conditions,  both  crystal  oscillator  clocks  and  atomic  clocks  can  achieve  this  degree  of 
synchronization  and  syntonization.  However,  given  the  relatively  long  lifetimes  of  today’s  satellite 
missions,  system  design  must  anticipate  and  plan  for  operation  during  periods  of  solar  maximum,  when  the 
spacecraft  clocks  experience  an  enhanced  space-radiation  environment.  Though  atomic  clocks  are 
essentially  insensitive  to  solar  radiation  [1],  timekeeping  with  crystal  oscillator  clocks  can  be  significantly 
degraded  during  a  solar  flare.  Consequently,  in  order  to  ensure  operability  during  solar  maximum,  one 
might  feel  compelled  to  place  either  atomic  clocks  or  well-shielded  crystal  oscillator  clocks  on  all  system 
spacecraft. 

An  alternative  to  placing  atomic  clocks  (for  example)  on  all  spacecraft  is  to  place  radiation-insensitive 
clocks  on  only  a  few  spacecraft  and  then  to  use  satellite  crosslinks  to  tightly  tie  other  spacecraft  clocks  to 
these  few  high  quality  devices.  If  the  crosslink  synchronization  and  syntonization  procedures  can  be  made 
robust,  the  radiation  insensitivity  of  atomic  clocks  would  then  be  passed  to  lower  quality  clocks  with 
potential  savings  in  size,  weight,  power  consumption,  and  cost.  Here,  we  describe  the  efficacy  of  this 
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approach  using  the  Milstar  communications  satellite  system  as  an  example.  Milstar  is  the  newest 
generation  of  United  States  milsatcom,  and  the  system  is  meant  to  provide  secure  communications  for 
United  States  Department  of  Defense  operations  in  the  first  decade  of  the  21st  century  [2].  Following  a 
brief  overview  of  Milstar’ s  approach  to  timekeeping,  we  examine  the  system’s  performance  during  the 
solar  flare  of  14  July  2000.  Specifically,  we  show  that  even  though  the  crystal  oscillator  clock  onboard 
Milstar  FLT-1  was  significantly  perturbed  by  the  solar  radiation,  crosslink  synchronization  and 
syntonization  procedures  tightly  tied  this  crystal  oscillator  to  the  rubidium  (Rb)  atomic  clock  carried 
onboard  FLT-2.  The  crosslink  information  allowed  FLT-1  to  correct  its  crystal  clock,  so  that 
communications  timekeeping  as  monitored  on  the  ground  was  unaffected  by  the  flare. 


MILSTAR  TIMEKEEPING 

Milstar  FLT-1  was  launched  on  7  February  1994  and  its  SC-cut  crystal  oscillator  has  been  performing 
quite  well  [3].  Specifically,  the  FLT-1  crystal  oscillator  displays  a  long-term  Allan  deviation,  oy(t),  of 
1.6x10-i4Vx  and  a  fractional-frequency  aging  rate  of  approximately  -lxl0',2/day;  both  of  these 
parameters  are  quite  good  for  crystal  oscillators  [4, 5].  The  second  Milstar  satellite,  FLT-2,  was  launched 
on  6  November  1995,  and  its  Rb  atomic  clock  has  also  been  performing  well  [6]:  in  the  long-term  ay(T)  = 
l.OxlO-15  -yft ,  and  the  clock  displays  a  linear  frequency  aging  rate  of  about  +7xl0'14/day. 


Figure  1.  Illustration  of  the  Milstar  system  as  described  in  the  text. 


Soon  after  the  completion  of  initial  FLT-2  testing,  FLT-1  was  “slaved”  to  FLT-2,  as  illustrated  in  Figure  1. 
In  the  slaving  procedure,  the  Slave  ties  the  frequency  of  its  oscillator  and  the  time  reading  of  its  clock  to  a 
Master  satellite  using  information  passed  along  the  satellite  crosslinks  in  a  standard  two-way  time-transfer 
procedure.  Briefly,  at  epoch  ei  the  Slave  and  Master  send  signals  to  one  another,  with  each  recording  their 
times  of  transmission  using  their  own  clocks  (i.e.,  t'^  (ej  and  t“  (e,)  for  the  Slave  and  Master, 
respectively).  Though  the  Slave  and  Master  clocks  will  indicate  that  they  transmitted  these  messages  at  the 
same  time,  in  reality  the  transmission  times  will  be  different  due  to  the  Slave  clock’s  time-error,  5t  [7]: 
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tL(e1)  =  tsmitrue(e1)+8t  =  t“(e1)+8t, 


(1) 


where  t^™6  (e, )  is  the  “true”  time  of  transmission,  which  for  the  Slave  satellite  is  defined  by  the  Master 
satellite’s  clock.  If  R  is  the  range  between  the  two  satellites,  then  the  satellites  will  receive  signals  at  a 
time  R/c  later,  which  they  then  record  as  tfec(e, )  and  t^c(e, ) .  The  Slave  and  Master  satellites  then 
compute  the  difference  between  their  receive  and  send  times,  AtJmvaI(e1)  =  ^(e,)- ^(e,): 


AtLvajfc.)  =  t“  (e,)+8t  +  --tsJe,). 

c 


At“Va,(e,)  =  tsmi(el)-8t+--C(e1). 


(2a) 

(2b) 


In  the  following  epoch,  e2,  the  Master  sends  its  At^val  value  to  the  Slave,  which  then  computes  its  clock 
offset  and  makes  the  appropriate  correction: 

St(e2 )  =  j  [AtLval  (ei )  -  At^val  (e, )].  (3) 


Keeping  track  of  the  8t(ej)  values  from  time  t(ei)  to  t(en),  the  Slave  can  also  determine  the  fractional 
frequency  offset  of  its  clock,  8y,  and  can  make  the  appropriate  frequency  corrections: 


5y  =  [t(en )  -  t(e, )]"'  8t(ej ) .  (4) 

1=1 

Analysis  has  shown  that  this  procedure  is  very  effective,  and  that  FLT-1  can  by  synchronized  to  FLT-2  to 
better  than  150  ns  [3]. 

In  2000,  FLT-1  was  in  view  of  the  constellation-control  ground  station,  while  FLT-2  was  out  of  view.  A 
few  times  a  day,  the  ground  station  made  time-offset  measurements  to  the  Master  satellite  clock  via  the 
FLT-1  to  FLT-2  crosslink,  and  every  few  days  uploaded  a  time  and  frequency  correction  to  the  Master, 
again  via  the  FLT-1  to  FLT-2  crosslink.  The  ground  station  maintains  time  with  a  cesium  atomic  clock 
referenced  to  Universal  Coordinated  Time  (UTC)  as  provided  by  the  United  States  Naval  Observatory.  In 
this  way,  the  entire  constellation  is  synchronized  to  UTC.  Additionally,  the  ground  station  downloads  and 
archives  telemetry  information  from  the  spacecraft.  Of  particular  relevance  is  the  archive  file  of  the  FLT-1 
autonomous  frequency  adjustments.  Since  this  archive  data  file  contains  the  corrections  that  FLT-1 
autonomously  implements  in  order  to  tie  its  crystal  oscillator  frequency  to  FLT-2’ s  atomic  clock,  the  file 
can  be  used  to  reconstruct  a  history  of  the  FLT-1  oscillator  frequency  (relative  to  FLT-2). 


SOLAR  FLARE  OF  14  JULY  2000 

As  we  are  now  in  solar  maximum  for  solar  cycle  23,  spacecraft  are  experiencing  heightened  radiation 
levels  due  to  the  increased  solar  activity.  Figure  2  shows  the  energetic  proton  data  collected  from  GOES-8 
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over  17  months  in  the  1999-2000  time  frame,  where  the  data  correspond  to  protons  with  energies  greater 
than  50  MeV  averaged  over  3  hours  [8].  As  is  clearly  discerned,  there  were  two  large  flares  in  the  latter 
part  of  2000,  one  on  14  July  and  the  other  on  9  November,  displaying  peak  proton  fluxes  of  1247  and  1799 
counts/(cm2sec-sr),  respectively.  This  proton  flux  data  are  shown  more  clearly  in  Figures  3a  and  3b, 
where  the  data  are  from  GOES-10  and  corresponds  to  5-minute  averages  of  E  >  50  MeV  protons.  In  order 
to  put  the  magnitude  of  these  flares  in  perspective.  Figure  4  shows  energetic  proton  data  from  GOES-7 
during  the  maximum  of  solar  cycle  22;  as  in  Figure  2,  the  data  correspond  to  protons  with  E  >  50  MeV 
averaged  over  3  hours.  Clearly,  during  1989  there  was  only  one  flare  that  produced  an  energetic  proton 
flux  greater  than  103  counts/(cm2sec-sr),  indicating  that  the  flares  of  14  July  and  9  November  were 
exceptionally  large.  Though  in  what  follows  we  concentrate  on  the  14  July  flare,  we  have  found  that 
similar  effects  and  conclusions  pertain  to  the  9  November  flare. 


Figure  2.  Three-hour  average  data  from  GOES-8  satellite  showing  flux  of  protons  with 
energies  greater  than  50  MeV  from  1  July  1999  to  30  November  2000. 


CLOCK  PERFORMANCE  DURING  A  SOLAR  FLARE 

As  part  of  satellite  telemetry  data,  FLT-1  downloads  the  autonomous  frequency  adjustments  that  it  applies 
in  order  to  tie  its  quartz  crystal  oscillator  to  the  Rb  atomic  clock  onboard  FLT-2.  From  the  adjustments,  it 
is  possible  to  determine  the  fractional  frequency  offset  of  FLT-1  relative  to  FLT-2,  and  these  are  shown  in 
Figure  5  as  a  function  of  date.  Also  reproduced  are  the  solar  proton  data  of  Figure  3  for  the  July  time 
frame.  As  Figure  5  shows,  the  flare  caused  a  jump  in  the  quartz  crystal’s  frequency  with  a  peak  value  of 
1.4xlO’10.  A  similarly  large  jump  was  observed  for  the  9  November  flare,  with  a  peak  Af/f0  of  2.0xl0"10. 

Though  the  14  July  and  9  November  flares  had  observable  effects  on  the  quartz  crystal  oscillator 
frequency,  it  must  be  remembered  that  these  were  observed  in  the  autonomous  frequency  corrections 
applied  by  the  spacecraft  in  order  to  keep  its  crystal  clock  tied  to  FLT-2 ’s  Rb  atomic  clock.  As  a  result  of 
those  corrections,  a  user  communicating  through  FLT-1  would  have  been  unaffected  by  the  flare  if  the 
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FLT-2  atomic  clock  was  unaffected  by  the  flare,  and  if  the  slaving  of  FLT-1  to  FLT-2  was  effective  in 
mitigating  the  influence  of  the  flare  on  FLT-1  timekeeping. 


1  Jul  8  Jul  15  Jul  22  Jul  29  Jul 


Date  in  2000 


2  Nov  9  Nov  16  Nov  23  Nov  30  Nov 


Date  in  2000 

Figure  3.  (a)  Five-minute  average  data  from  the  GOES-10  satellite  showing  flux  of  protons 
with  energies  greater  than  50  MeV  in  July  2000;  (b)  same  as  (a)  except  for  November  2000. 
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Figure  4.  Three-hour  average  data  from  GOES-7  satellite  showing  flux  of  protons  with 
energies  greater  than  50  MeV  for  solar  cycle  22. 


Figure  5.  Archived,  autonomous  frequency  corrections  for  the  quartz  crystal  oscillator 
onboard  FLT-1.  These  are  the  corrections  that  were  applied  by  the  spacecraft  in  order  to  tie 
its  oscillator’s  frequency  to  the  FLT-2  Rb  atomic  clock.  The  gray  curve  is  a  reproduction  of 
Figure  3a  to  simply  illustrate  the  timing  of  events. 
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Date  in  2000 


Figure  6.  Time  offset  data  as  a  function  of  date.  Circles  correspond  to  the  measurements  of 
FLT-l’s  actual  time  offset  as  made  by  the  ground  control  ground  station.  Time  corrections 
commanded  to  FLT-2  during  this  interval  have  been  removed  from  the  data.  The  solid  lines 
are  fits  prior  to  and  after  14  July. 


The  robustness  of  atomic  clock  timekeeping  and  satellite  clock  slaving  is  verified  by  the  data  of  Figure  6. 
In  this  figure,  time-offset  data  between  FLT-1  and  the  ground  station  (filled  circles)  are  plotted  as  a 
function  of  date  in  July  2000.  Time  and  frequency  corrections  commanded  to  FLT-2  from  the  ground  have 
been  removed  from  the  data,  so  that  the  data  represent  generic  spacecraft  timekeeping  uncoupled  from 
specific  Milstar-system  details.  Basically,  the  time-offsets  of  Figure  6  represent  the  time-errors  that  would 
have  been  observed  by  a  user  had  the  two  satellites  been  operating  without  the  benefit  of  ground  control 
(i.e.,  independent  of  any  specific  system).  As  is  clear  from  the  figure,  FLT-1  would  have  picked  up  a 
maximum  of  about  2  psec  of  error  during  the  entire  month  of  July,  due  primarily  to  the  (normal)  random 
and  deterministic  timekeeping  variations  associated  with  the  FLT-2  Rb  atomic  clock  to  which  it  was  slaved 
[6,10]-  Note  that  on  14  July  there  is  a  discontinuity  in  the  timekeeping  data.  Specifically,  it  appears  that 
there  is  a  time-jump  of  about  250  ns  and  a  fractional  frequency-jump  of  about  2xl0"13.  These  effects  could 
be  due  to  the  solar  flare’s  effect  on  the  FLT-2  Rb  atomic  clock;  they  could  be  due  to  flare  induced  effects 
in  the  satellite-to-satellite  time-transfer  process;  they  could  be  due  to  some  satellite-to-ground  time-transfer 
effect,  or  they  could  be  due  to  some  portion  of  the  crystal's  radiation  sensitivity  not  mitigated  by  the  slaving 
process.  At  the  present  time  we  cannot  distinguish  among  any  of  these  possibilities.  Notwithstanding  this 
uncertainty,  these  errors  are  essentially  within  the  timekeeping  noise,  and  have  no  significant  effect  on 
timekeeping  for  communication  purposes. 
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Figure  7.  Time  offset  data  as  a  function  of  date  illustrating  the  effect  of  the  flare  on  FLT-1 
timekeeping  if  the  satellite  had  not  been  slaved  to  FLT-2. 


If  FLT-1  had  not  been  slaved  to  FLT-2,  then  the  radiation-induced  frequency  change  of  FLT-l’s  quartz 
crystal  oscillator  would  have  given  rise  to  significant  timing-errors.  Using  the  frequency-offset  data  of 
Figure  5,  we  can  compute  the  timing-error  FLT-1  would  have  displayed  if  it  had  not  been  slaved.  This  is 
shown  by  the  triangles  in  Figure  7.  Thus,  even  though  the  14  July  solar  flare  had  a  significant  effect  on  the 
quartz  crystal  oscillator  of  FLT-1,  and  could  have  seriously  degraded  the  spacecraft’s  timekeeping,  the 
spacecraft’s  actual  timekeeping  was  not  perturbed  due  to  the  radiation  insensitivity  of  atomic  clocks  and 
the  efficacy  of  the  satellite  slaving  procedures. 


CONCLUSIONS 

As  satellite  communications  systems  continue  to  develop,  they  will  place  increasing  demands  on  spacecraft 
timekeeping.  In  particular,  precise  time  will  need  to  be  maintained  during  periods  of  heightened  solar 
activity.  Here,  we  discussed  the  efficacy  of  a  slaving  solution  to  this  problem,  where  atomic  clock 
timekeeping  is  combined  with  crosslink  time  transfer.  Examining  the  Milstar  system’s  performance  during 
the  large  solar  flare  of  14  July  2000,  we  found  that  even  though  the  quartz  crystal  clock  onboard  FLT-1 
was  (predictably)  perturbed  by  the  space  radiation,  the  effect  on  system  timekeeping  was  mitigated  by 
FLT-l’s  slaving  to  the  Rb  atomic  clock  carried  onboard  FLT-2.  Atomic  clock  timekeeping  and  satellite 
slaving  is,  therefore,  an  effective  procedure  for  creating  a  radiation  insensitive,  autonomous  satellite 
timekeeping  system. 
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